locked out of my tenant due to conditional access

Mike Veschi 0 Reputation points
2026-06-09T20:18:17.61+00:00

I have a global policy on all user and cant login due to Conditional access policy. Can you help remove it?

Community Center | Not monitored

1 answer

Sort by: Newest
  1. AI answer

    2026-06-09T20:18:28.91+00:00

    If sign-in is blocked for all users, including administrators, by a Conditional Access policy, the policy cannot be removed directly from the portal. Use the following supported recovery paths:

    1. Check for any unblocked admin or emergency access account
      • If there is another administrator or a break-glass/emergency access account that is not affected by the policy, sign in with that account.
      • In the Microsoft Entra admin center, go to Entra IDProtectionConditional Access and disable or edit the policy that is blocking sign-in.
    2. If all admins are locked out
      • When no administrator can sign in to update Conditional Access, a support request with Microsoft is required.
      • Follow the documented guidance to submit a support request so Microsoft Support can review and, after confirming ownership, update or disable the Conditional Access policies that are preventing access.
    3. Prevent future lockouts
      • Configure at least one emergency access (break-glass) account and exclude it from Conditional Access policies so it can always sign in and recover access if a policy is misconfigured.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.